From Newsweek · · 1m 10s
Security standards lag behind modern threats
Old security rules fail to protect against today's digital risks.
In brief
Old security rules fail to protect against today's digital risks. Rigid security standards that check boxes without addressing real threats leave critical systems vulnerable to modern cyber risks. Originally reported by Newsweek.
Security policy pattern
American security policy followed a pattern of threat emergence, policy creation, funding, and deployment for decades.
Modern threats outpace standards
Technological advancements like ai, open-source intelligence, 5g, drones, encryption, and quantum computing reshape security risks faster than standards can adapt.
Water systems compliance issue
In May 2024, the EPA reported over 70 percent of community water systems failed federal risk-assessment and emergency-planning requirements.
Outdated standards cause problems
Existing security standards were built for old adversaries and focus on checking boxes rather than addressing modern digital threats.
Small contractors face unfair costs
Meeting standards designed for large companies forces small contractors to spend thousands on irrelevant compliance measures.
Fix requires flexible standards
Security standards must be reviewed monthly with threat intelligence and technical experts to ensure they stop real threats without excessive costs.
Consequence of inaction
Failure to update security standards risks widespread system disruption and irreversible data breaches affecting critical national infrastructure.
The main idea
Rigid security standards that check boxes without addressing real threats leave critical systems vulnerable to modern cyber risks.
